$ rpki-client -vvf rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft File: RbGOIJ7P3aXO14z52YENYR5tQSQ.mft (raw, json) Hash identifier: RNl2FXtk7tTvLgUFTMtSxoMKob4vNBYsHiSBK+bna3c= Subject key identifier: FB:04:64:A2:6F:59:DA:A9:B7:B6:A6:C4:8C:87:55:43:11:9F:8F:12 Authority key identifier: 45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 Certificate issuer: /CN=A9113BB0/serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft Manifest number: 0E Signing time: Thu 05 Jun 2025 07:31:19 +0000 Manifest this update: Thu 05 Jun 2025 07:31:18 +0000 Manifest next update: Thu 12 Jun 2025 07:31:18 +0000 Files and hashes: 1: RbGOIJ7P3aXO14z52YENYR5tQSQ.crl (hash: b4am24PUMRD6zw21vEp7xw4NvaZvrcvPJu0Lk2Omd4A=) 2: C100F8FE385D11F0B165166CC4F9AE02.roa (hash: X4yO+2uZWy3hhNHPg2Botaoo1uuwNwgNw2Z5oY+nYVw=) 3: 0B5EA7DA323B11F0A65FFB36C4F9AE02.roa (hash: Q/Q2sUKmgFU8L5pYFoikcLW7y4sJztj/yUCaAVnv9mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 07:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113BB0, serialNumber=45B18E209ECFDDA5CED78CF9D9810D611E6D4124 Validity Not Before: Jun 5 07:31:18 2025 GMT Not After : Jun 12 07:31:18 2025 GMT Subject: CN=684147c6-829c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:61:01:43:d9:52:0f:c8:41:8e:31:06:47: 8a:66:1c:5a:1e:55:2a:2d:ff:17:3b:c3:f6:cf:10: 92:b6:5e:f3:09:57:e8:dd:d9:a8:e2:05:68:73:be: 1e:9b:dc:ce:92:6f:a1:e1:f5:9f:b1:0a:a6:ab:7d: dd:52:8e:bb:20:ff:3c:a3:0d:52:62:0c:cf:b2:21: 62:bc:8e:03:d3:4d:d3:da:48:44:00:66:4e:fc:17: 54:3f:cf:1d:e1:f2:58:ba:99:cf:18:71:fb:6d:a3: 6d:f0:8d:3b:7b:49:db:29:b5:72:4a:94:68:59:19: aa:43:46:bf:d4:43:f3:af:16:7f:b8:4d:2a:ae:ab: 5f:0e:23:39:6d:cd:cb:ed:7f:47:98:30:c2:1f:c7: 2b:93:c9:34:1c:c9:1b:ca:d5:d6:cc:bf:11:2f:5b: 2d:36:1d:db:2e:0f:89:f6:a9:da:72:6d:4e:c5:b6: f8:5f:cc:89:40:d3:79:92:47:b3:1e:89:28:d4:19: 49:d1:5f:5b:92:58:14:96:90:00:c2:61:69:46:5f: 6f:46:8b:13:15:cd:09:ea:13:00:24:dc:24:34:69: 49:7b:5c:e4:2d:ce:82:88:88:0e:cc:bc:94:18:b4: f6:4e:87:36:58:10:be:e6:df:4c:5a:62:f9:9b:a3: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:04:64:A2:6F:59:DA:A9:B7:B6:A6:C4:8C:87:55:43:11:9F:8F:12 X509v3 Authority Key Identifier: keyid:45:B1:8E:20:9E:CF:DD:A5:CE:D7:8C:F9:D9:81:0D:61:1E:6D:41:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RbGOIJ7P3aXO14z52YENYR5tQSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113BB0/9FFDAB76323A11F0BF9E1D36C4F9AE02/RbGOIJ7P3aXO14z52YENYR5tQSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:3a:42:18:ce:e7:03:c6:06:a5:2e:e9:5c:c9:00:0d:1e:98: 92:6b:a5:ea:c2:59:86:28:75:57:ec:d7:f7:4f:7a:89:2d:3c: 12:cc:a9:20:c5:6e:fb:c5:4e:9c:60:6e:83:42:05:54:7d:f0: 24:f9:c0:ff:cb:36:72:c7:04:27:c6:7c:92:fe:09:a3:45:fd: b2:2b:40:20:da:1b:3b:e7:9d:3f:35:f6:74:d4:d4:e3:46:74: b7:db:63:ae:03:80:b5:d2:73:cc:cd:a4:6a:b6:d3:ab:46:c5: 83:12:83:55:64:07:1c:b7:1b:7f:26:24:9e:6c:9b:11:f5:c7: d7:f8:bb:86:f6:57:ce:25:fe:3f:36:9c:b8:7a:4d:4c:13:f3: 12:20:d1:bd:fc:f9:d6:96:7d:92:0b:7b:f9:a9:81:45:94:d9: 90:38:03:5c:95:32:2e:fb:4c:0c:aa:d5:21:8f:47:93:a0:ca: fc:2d:d2:49:ff:de:ce:35:92:53:7d:d7:af:68:51:32:13:8d: 93:0a:cf:cf:98:9c:8e:0b:f0:9e:e4:de:86:97:ef:17:2e:9f: 7b:9b:2b:bf:2b:fb:d7:eb:6b:67:73:34:3a:0b:3d:55:d2:e2: ec:2c:97:14:73:72:15:26:51:13:a4:04:a7:6f:e1:9e:74:5f: 48:0c:c1:af -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx M0JCMDExMC8GA1UEBRMoNDVCMThFMjA5RUNGRERBNUNFRDc4Q0Y5RDk4MTBENjEx RTZENDEyNDAeFw0yNTA2MDUwNzMxMThaFw0yNTA2MTIwNzMxMThaMBgxFjAUBgNV BAMTDTY4NDE0N2M2LTgyOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOq2EBQ9lSD8hBjjEGR4pmHFoeVSot/xc7w/bPEJK2XvMJV+jd2ajiBWhzvh6b 3M6Sb6Hh9Z+xCqarfd1Sjrsg/zyjDVJiDM+yIWK8jgPTTdPaSEQAZk78F1Q/zx3h 8li6mc8Ycftto23wjTt7SdsptXJKlGhZGapDRr/UQ/OvFn+4TSquq18OIzltzcvt f0eYMMIfxyuTyTQcyRvK1dbMvxEvWy02HdsuD4n2qdpybU7FtvhfzIlA03mSR7Me iSjUGUnRX1uSWBSWkADCYWlGX29GixMVzQnqEwAk3CQ0aUl7XOQtzoKIiA7MvJQY tPZOhzZYEL7m30xaYvmbo/0xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+wRkom9Z 2qm3tqbEjIdVQxGfjxIwHwYDVR0jBBgwFoAURbGOIJ7P3aXO14z52YENYR5tQSQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzQkIwLzlGRkRBQjc2MzIz QTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FYTzE0ejUyWUVOWVI1dFFT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUmJHT0lKN1AzYVhPMTR6NTJZRU5ZUjV0UVNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz QkIwLzlGRkRBQjc2MzIzQTExRjBCRjlFMUQzNkM0RjlBRTAyL1JiR09JSjdQM2FY TzE0ejUyWUVOWVI1dFFTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAI6QhjO5wPGBqUu6VzJAA0emJJrperCWYYodVfs1/dPeoktPBLMqSDF bvvFTpxgboNCBVR98CT5wP/LNnLHBCfGfJL+CaNF/bIrQCDaGzvnnT819nTU1ONG dLfbY64DgLXSc8zNpGq206tGxYMSg1VkBxy3G38mJJ5smxH1x9f4u4b2V84l/j82 nLh6TUwT8xIg0b38+daWfZILe/mpgUWU2ZA4A1yVMi77TAyq1SGPR5Ogyvwt0kn/ 3s41klN9169oUTITjZMKz8+YnI4L8J7k3oaX7xcun3ubK78r+9fra2dzNDoLPVXS 4uwslxRzchUmUROkBKdv4Z50X0gMwa8= -----END CERTIFICATE-----Generated at Thu Jun 5 19:21:58 2025 by rpki-client